Notice of Privacy
In accordance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals (the “Law”) and the Regulations of the Law (the “Regulations”), and in compliance with the obligation of “Deshidratadora Aguascalientes”, S.A. de C.V. (“DASA”), a company responsible for protecting the personal data of its customers and suppliers, we hereby inform you of the following:
1. Responsible for the processing of your personal data:
The person responsible for the treatment of your personal data, is the legal entity called “Deshidratadora Aguascalientes”, S.A. de C.V. (“DASA”), a company incorporated in accordance with Mexican law, with domicile at Carretera Estatal N°27 KM 15.31, colonia El Barranco, zip code 20305, in the municipality of San Francisco de los Romo, Aguascalientes.
DASA has designated a department in charge of the custody of the personal data of its customers and suppliers, within its domicile, which will attend and process everything related to this Privacy Notice (the “Notice”). For this purpose, DASA makes available the following forms of contact:
- Emails: privacidad@santotomas.com.mx ; privacidadclientes@santotomas.com.mx ; and/or privacidadproveedores@santotomas.com.mx
- Address: Vicente Guerrero Pte. sin número, colonia Centro, postal code 20300, in the municipality of San Francisco de los Romo, Aguascalientes.
- Telephone: (449) 91-44-253.
- Attention in case of clients:
Luis Fernando Valdés Loera – Marketing and sales manager. - Attention in case of suppliers:
Roberto Carlos Hernández Xochicale – Operations Manager – Suppliers of supplies and services.
2. Content of personal data:
For the purposes of the Notice, personal data is understood as any information concerning the customer and/or supplier of DASA, which you yourself provide us, including but not limited to the following:
2.1. General data. Full name; official identification; age; date of birth; address; proof of address; marital status; nationality; immigration document; email; home, work, cell phone; federal taxpayer registration; unique population registry code (CURP); signature; photograph of the person; employment data, such as position, address, email and work phone; patrimonial data, such as bank accounts, number of bank cards, name of the cardholder, card number, expiration date, type of card, and any other information necessary for the contracting of services; as well as any other documentation or information that is required for the commercial or contractual relationship that currently exists between DASA and you.
2.2. Sensitive data. DASA does not collect or use sensitive personal data from its customers and suppliers.
The aforementioned personal data will only be subject to the purposes of the processing of your personal data, as defined below in this Notice, for as long as the commercial or contractual relationship subsists, and until the term established by the law on the matter.
3 . Purposes of the processing of your personal data:
DASA declares as purposes of the processing of your personal data those necessary to comply with the commercial or contractual relationship that exists between you and DASA, being the following:
- Form, control and update general files and directories of customers and suppliers; review and manage the operations carried out, or to be carried out with you; and follow up on the activities arising from such operations.
- Make payments and / or charges that correspond to the obligations arising from the commercial and / or contractual relationship of DASA with you.
- Conduct or comply with internal and external audits; submit customer and supplier information statements; send you our communications, such as surveys and promotional offers; as well as market and issue communications to and with you regarding the services provided by DASA.
- Conduct market research through surveys, in order to better serve your needs, evaluate the quality of our products and services, our various types of communication, advertising campaigns and / or promotional activities.
- To register in our ERP (Enterprise Resource Planning) system, in order to develop and manage the commercial and contractual relationship that DASA has with you.
- Identification of visitors, auditors or third parties entering DASA’s facilities.
In the case of suppliers:
- To draw up the contracts and/or documents necessary for the provision of services and/or supply of products that may be requested by DASA; to comply with the obligations arising from the commercial and/or contractual relationship of DASA with you; as well as to ensure compliance with such obligations.
- Receive the services and/or products requested by DASA, notify about changes, updates, expansion and/or conclusion in the contracted services and products supplied to DASA; and in its case, make periodic evaluations of its services and/or products, in order to request, if necessary, the improvement in the quality of the same.
- Bank movements and registration of suppliers in the banking portal.
In the case of clients:
- To prepare the contracts and/or documents necessary for the provision of services and sale of products that may be requested; to comply with the obligations arising from the commercial and/or contractual relationship of DASA with you; as well as to ensure compliance with such obligations.
- To provide the services and/or products requested, to notify about changes, updates, expansion and/or conclusion in the contracted services and/or products supplied; and in its case, to carry out periodic evaluations of our products and services in order to improve the quality of the same.
- Send and, in any other way, deliver samples of products that DASA sells, as well as any other product or service that has been purchased and/or contracted by you.
DASA may use your personal data for other purposes, provided that these are compatible with the above and / or are necessary for the aforementioned business relationship and / or contract.
4 . Provision of the Notice and consent to the processing of your personal data:
Making available: DASA shall make available to you the content of this Notice or an excerpt thereof at its domicile or on its website www.dasacv.com, as well as in the following means:
4.1. Personal or direct form. In cases where DASA collects your data directly, you will be informed at that time of the Notice or an extract, either through the formats in which such data is collected, or through the platform you have used to provide us with your data directly.
4.2. Indirect form. In cases where DASA obtains your data indirectly, it will make available to you the content of the Notice, by e-mail, fax or through any other remote means of communication that is in the data obtained indirectly.
Consent: In the exclusive event that DASA intends to process your personal data for a purpose other than those set forth in the preceding paragraph, it must obtain your consent in accordance with the following:
Tacit consent: Once DASA notifies you of the new purposes, you will have a period of 5 calendar days to express your refusal to the processing of your personal data through the means indicated in paragraph 1. In the event that DASA does not receive your refusal, it will be understood that you have given us your tacit consent.
Express consent: DASA may implement the necessary measures so that you can express your express consent at that time for the processing of your personal data, either through printed or electronic means. In the case of the processing of sensitive personal data, you must give us your consent in writing.
5. Procedure for revocation of consent:
At any time you may revoke the consent you have given us for the processing of your personal data, so that we stop making use of them; for which, you must send the request in writing in accordance with the procedure set forth in section 8 of the Notice.
6. Actions to prevent unauthorized use or disclosure:
In order to protect your personal data, DASA continuously performs the following actions:
- Confidentiality of the information: DASA and its personnel maintain confidentiality with respect to your personal data collected, which will subsist even after the end of the commercial and/or contractual relationship with you.
- Notification of confidentiality: In the event that, for any reason, DASA is in the need to provide your personal data to third parties (in the terms provided in the Law, its Regulations or in this Notice), it will notify such third parties of the obligation to comply with the provisions of the Law and its Regulations, the Notice and the confidentiality of your personal data.
- Administration of databases: Personal data are safeguarded through the use of databases, which are administered only by persons designated by DASA for this purpose, without allowing their use, consultation, management or access to unauthorized persons.
- Computer and information systems: The databases are protected by computer systems focused on preventing and avoiding that people outside DASA access your personal data.
7 . Limiting the use or disclosure of your personal data:
In case you wish to limit the use and disclosure of your personal data, you may send the respective request according to the procedure established in section 8 of the Notice.
8 . Rights of access, rectification, cancellation or opposition of data (ARCO):
In accordance with the provisions of the Law, you have the right to access, rectification, cancellation or opposition to the processing of your personal data. To do so, you must send to the corresponding Department a request that must contain, at least:
- Your full name and address.
- Documents proving your identity or the legal representation of the person appearing on your behalf.
- Clear and precise description of the personal data with respect to which you wish to exercise any of the aforementioned rights, or with respect to which you wish to limit the use or disclosure.
- Any other element or document that facilitates the location of the personal data.
- In case of request for rectification of data, also indicate the changes to be made and provide documentation to support your request.
DASA will inform you of the determination adopted, in the event that it is appropriate, DASA will have a period of 45 days following the date on which the response is communicated to you, to make it effective. The procedure must be carried out in accordance with the terms established in the Law and its Regulations.
9 . Updating of personal data:
To ensure that your personal data is accurate, we invite you to update your information regularly by contacting us through the means indicated in section 1.
10 . Changes to the Notice:
DASA reserves the right to make changes to this Notice, in which case DASA will inform you through one of the ways and means set forth in section 4. of the Notice.
11 . Transfer of personal information:
In the event that DASA comes to transfer your personal data to carry out purposes other than those established in section 3., it will do so after entering into confidentiality agreements with third parties and, provided that: (i) We obtain your prior consent; and (ii) The person to whom it is transmitted agrees to submit the processing of personal data to the purposes for which they were collected and in accordance with this Notice.
Consent:
If you do not express your refusal for your personal data to be transferred in accordance with the previous paragraph, in accordance with the terms and forms provided in section 4. it will be understood that you have given your tacit consent to do so. Notwithstanding the foregoing, DASA may implement the necessary measures so that you can express your express consent for the transfer of your personal data.
Exception to consent:
It should be noted that your consent for the transfer of your personal data will not be necessary when DASA requires to transmit them in the cases referred to in Article 37 of the Law.
Last update: May 14, 2021.
“Deshidratadora Aguascalientes”, S.A. de C.V. (“DASA”)
Roberto Carlos Hernández Xochicale
In accordance with the provisions of the Federal Law for the Protection of Personal Data in Possession of Individuals (the “Law”) and the Regulations of the Law (the “Regulations”), and in compliance with the obligation of “Comercializadora Santo Tomás”, S.A. de C.V. (“COMSANTO”), a company responsible for protecting the personal data of its customers and suppliers, we hereby inform you of the following:
1. Responsible for the processing of your personal data:
The person responsible for the treatment of your personal data is the legal entity called “Comercializadora Santo Tomás”, S.A. de C.V. (“COMSANTO”), a company incorporated in accordance with Mexican law, with domicile at Calle López Cotilla number 2032 Piso 6, Colonia Arcos Vallarta, C.P. 44130, in Guadalajara, Jalisco.
COMSANTO has designated a department in charge of the custody of the personal data of its customers and suppliers, within its domicile, which will attend and process all matters related to this Privacy Notice (the “Notice”). For this purpose, COMSANTO makes available the following forms of contact:
- E-mail: avisodeprivacidad@santotomas.com.mx
- Address: Calle López Cotilla number 2032 Piso 6, Colonia Arcos Vallarta, C.P. 44130, in Guadalajara, Jalisco.
- Telephone: 33 3645-4282
- Attention in case of clients and suppliers: Karina Michelle Meza Cuevas
2. Content of personal data:
For the purposes of the Notice, personal data is understood as any information concerning the customer and/or supplier of COMSANTO, which you yourself provide us, including but not limited to the following:
2.1. General information. Full name; official identification; age; date of birth; address; proof of address; marital status; nationality; immigration document; e-mail; home, work, cell phone; federal taxpayer registry; unique population registry code (CURP); signature; photograph; employment data, such as position, address, e-mail and work phone number; patrimonial data, such as bank accounts, number of bank cards, cardholder’s name, card number, expiration date, type of card, and any other information necessary for the contracting of services; as well as any other documentation or information required for the commercial or contractual relationship that currently exists between COMSANTO and you.
2.2. Sensitive data. COMSANTO does not collect or use sensitive personal data of its customers and suppliers.
The aforementioned personal data will only be subject to the purposes of the processing of your personal data, as defined below in this Notice, for as long as the commercial or contractual relationship subsists, and until the term established by the law on the matter.
3 . Purposes of the processing of your personal data:
COMSANTO declares as purposes of the processing of your personal data those necessary to comply with the commercial or contractual relationship that exists between you and COMSANTO, being the following:
- Form, control and update general files and directories of customers and suppliers; review and manage the operations performed or to be performed with you; and follow up the activities derived from such operations.
- Make payments and/or charges corresponding to the obligations derived from the commercial and/or contractual relationship between COMSANTO and you.
- Conduct or comply with internal and external audits; submit customer and supplier information statements; send you our communications, such as surveys and promotional offers; as well as market and issue communications to and with you regarding the services provided by COMSANTO.
- Conduct market research through surveys, in order to better serve your needs, evaluate the quality of our products and services, our various types of communication, advertising campaigns and / or promotional activities.
- To register in our system, in order to develop and manage the commercial and contractual relationship that COMSANTO has with you, among them Comercia GS and Contpaq i.
- Identification of visitors, auditors or third parties entering COMSANTO’s facilities.
In the case of suppliers:
- To prepare the contracts and/or documents necessary for the provision of services and/or supply of products that may be requested by COMSANTO; to comply with the obligations arising from the commercial and/or contractual relationship of COMSANTO with you; as well as to ensure compliance with such obligations.
- Receive the services and/or products requested by COMSANTO, notify about changes, updates, extension and/or conclusion in the contracted services and the products supplied to COMSANTO; and in its case, make periodic evaluations of its services and/or products, in order to request, in its case, the improvement in the quality of the same.
- Bank movements and registration of suppliers in the banking portal.
In the case of clients:
- To prepare the contracts and/or documents necessary for the provision of services and sale of products that may be requested; to comply with the obligations arising from the commercial and/or contractual relationship of COMSANTO with you; as well as to ensure compliance with such obligations.
- Provide the services and/or products requested, notify about changes, updates, expansion and/or conclusion in the contracted services and/or products supplied; and in its case, perform periodic evaluations of our products and services in order to improve the quality of the same.
- Send and, in any other way, deliver samples of products that COMSANTO commercializes, as well as any other product or service that may have been purchased and/or contracted by you.
COMSANTO may use your personal data for other purposes, provided that these are compatible with the above and/or are necessary for the aforementioned commercial and/or contractual relationship.
4 . Provision of the Notice and consent to the processing of your personal data:
Making available: COMSANTO shall make available to you the content of this Notice or an excerpt thereof at its domicile or on its website https://santotomas.com.mx/, as well as in the following means:
4.1. Personal or direct form. In the cases in which COMSANTO collects your data directly, it shall make the Notice or an extract thereof available to you at that time, either through the formats in which such data is collected, or through the platform you have used to provide us with your data directly.
4.2. Indirect form. In the cases in which COMSANTO obtains your data indirectly, it will make available to you the content of the Notice, by e-mail, fax or through any other remote means of communication that is in the data obtained indirectly.
Consent: In the exclusive event that COMSANTO intends to process your personal data for a purpose other than those set forth in the previous section, it must obtain your consent in accordance with the following:
Tacit consent: Once COMSANTO notifies you of the new purposes, you will have a period of 5 calendar days to express your refusal to the processing of your personal data through the means indicated in paragraph 1. In the event that COMSANTO does not receive your refusal, it will be understood that you have given us your tacit consent.
Express consent: COMSANTO may implement the necessary measures so that you can express your express consent at that time for the processing of your personal data, either through printed or electronic means. In case of the treatment of sensitive personal data, you must give us your consent in writing.
5. Procedure for revocation of consent:
At any time you may revoke the consent you have given us for the processing of your personal data, so that we stop making use of them; for which, you must send the request in writing in accordance with the procedure set forth in section 8 of the Notice.
6. Actions to prevent unauthorized use or disclosure:
In order to protect your personal data, COMSANTO continuously performs the following actions:
- Confidentiality of the information: COMSANTO and its personnel keep the confidentiality of your personal data collected, which will subsist even after the end of the commercial and/or contractual relationship with you.
- Confidentiality notice: In the event that, for any reason, COMSANTO may need to provide your personal data to third parties (in the terms provided in the Law, in its Regulations or in this Notice), it will notify such third parties of the obligation to comply with the provisions of the Law and its Regulations, the Notice and the confidentiality of your personal data.
- Administration of databases: Personal data are safeguarded through the use of databases, which are administered only by persons designated by COMSANTO for such purpose, without allowing their use, consultation, handling or access to unauthorized persons.
- Computer and information systems: The databases are protected by computer systems focused on preventing and avoiding that people outside COMSANTO have access to your personal data.
7 . Limiting the use or disclosure of your personal data:
In case you wish to limit the use and disclosure of your personal data, you may send the respective request according to the procedure established in section 8 of the Notice.
8 . Rights of access, rectification, cancellation or opposition of data (ARCO):
In accordance with the provisions of the Law, you have the right to access, rectification, cancellation or opposition to the processing of your personal data. To do so, you must send to the corresponding Department a request that must contain, at least:
- Your full name and address.
- Documents proving your identity or the legal representation of the person appearing on your behalf.
- Clear and precise description of the personal data with respect to which you wish to exercise any of the aforementioned rights, or with respect to which you wish to limit the use or disclosure.
- Any other element or document that facilitates the location of the personal data.
- In case of request for rectification of data, also indicate the changes to be made and provide documentation to support your request.
COMSANTO will communicate the determination adopted, in case it is appropriate, COMSANTO will have a period of 45 days following the date on which the response is communicated, to make the same effective. The procedure must be carried out in accordance with the terms established in the Law and its Regulations.
9 . Updating of personal data:
To ensure that your personal data is accurate, we invite you to update your information regularly by contacting us through the means indicated in section 1.
10 . Changes to the Notice:
COMSANTO reserves the right to make changes to this Notice, in which case COMSANTO will inform you by any of the ways and means established in section 4. of the Notice.
11 . Transfer of personal information:
Both general and sensitive personal data that may be collected may be provided to COMSANTO’s affiliates and subsidiaries and to any authority or banking and/or financial institutions that request data in order to comply with the commercial relationship between COMSANTO and you.
In the event that COMSANTO transfers your personal data to carry out purposes other than those set forth in paragraph 3, it will do so after entering into confidentiality agreements with third parties and provided that: (i) We obtain your prior consent; and (ii) The person to whom the personal data is transferred agrees to submit the processing of personal data to the purposes for which they were collected and in accordance with this Notice.
Consent:
If you do not express your refusal for your personal data to be transferred according to the previous paragraph, in accordance with the terms and forms provided in section 4, it will be understood that you have given your tacit consent to it. Notwithstanding the foregoing, COMSANTO may implement the necessary measures so that you can express your express consent for the transfer of your personal data.
Exception to consent:
It should be noted that your consent for the transfer of your personal data will not be necessary when COMSANTO requires to transmit them in the cases referred to in article 37 of the Law.
Last update: February 4, 2021.
“Comercializadora Santo Tomás”, S.A. de C.V. (“COMSANTO”)
Gabriel Limón Aguilar